Privacy policy

eastvale.city ("we") is an independent community guide to Eastvale, California. It is not affiliated with the City of Eastvale or any government agency. This page explains what personal information we collect, why, who it is shared with, and what you can do about it. Questions: hello@eastvale.city.

Reading the site

You can read every page without an account. We do not use advertising or tracking services, and we set no cookies except one that remembers whether you prefer the light or dark look. We count visits with Umami, a privacy-friendly tool we run ourselves: it sets no cookies, does not follow you across sites, and keeps no network address or other personal data, only the page, the site that linked to it, and your browser, type of device and country. Sign-in, confirmation and team pages are never counted. Our host, Vercel, keeps ordinary server logs (including your network address) to run and protect the site. If you press "Find the best deal near me" on the gas page, your browser asks to share your location; it is used only on your device to measure distances and is never sent to us or anyone else. Some article photos load from Unsplash, the photo library that provides them, so your browser contacts Unsplash for those images.

Do Not Track: because we do not track visitors across sites or over time, the site behaves the same whether or not your browser sends a Do Not Track signal. No third party is allowed to collect personal information about you over time through our site.

When you send us something

Anyone can claim a business, post an event, report a lost or found pet or item, post a job, or add their decorated house to a seasonal page. For each of these we collect:

• What you write in the form. It is about the business, event, pet, item or job. Nothing is shown on the site until a person at eastvale.city reads and approves it.
• Your email address. We use it to send the confirmation link, to tell you the outcome and to ask questions about what you sent. It is never shown on the site. On a job post, the application email you give is shown, because that is its purpose.
• A business phone number, only if you give one on a business claim. It is never published, and it is used to text you only if you tick the texting box (see "Text messages"). Lost and found, job and event posts do not take or show phone numbers: neighbors write to you through the site.
• Your address, only for your own seasonal display. You confirm that you live there and agree to the listing. It is shown on the season's page and route planner until the season's last day, then hidden.
• A photo, only if you add one to a lost and found post. We shrink it and remove the hidden information phones add to photos, including the location. It is stored privately and shown only while the post is up.
• Spam protection. Cloudflare Turnstile checks that a person, not a program, is using the form; Cloudflare sees your network address and browser details for that check. We keep a scrambled (hashed) form of your network address and your browser's name for a week to stop floods of submissions.

If you write to a lost and found poster through the site, we email your message to them with your address as the reply address. We do not keep the message.

Businesses and organizations

We keep public information about local businesses and organizations (name, services, public phone, email and website) to build the guide, including what neighbors mention about them in public community groups. We do not keep the names of the people who posted. We may look up a business's public social media accounts, and contact a business or organization about its listing by email, phone, text, a direct message on its public social media account, or a public reply. Each of these messages is written and sent by a person, and we keep a record of it. Reply "no thanks", STOP, or email us, and we mark it "do not contact" and stop. We do not keep listings of private individuals.

Holiday displays at homes

Our seasonal guides (Halloween, the winter holidays and others) list decorated houses only when the homeowner asks us to, or when the City of Eastvale itself has published the address. We show the address and the display's name, never the owner's name, and only until the display's last day; after that the address is no longer shown. Ask us at any time to take a listing down, and we will.

Text messages

We may send a business one personal text at its public number to introduce its listing. Regular texts about a listing are sent only after someone from the business agrees to them on our form, and the agreement (its wording, time and number) is recorded. Those messages are about the business's listing; how often varies, usually a few a month at most. Message and data rates may apply. Reply STOP to stop and HELP for help. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are never shared with any third party, except the text messaging provider (Twilio) that delivers the messages for us.

Who we share it with

We do not sell or rent personal information, and we do not share it for advertising. We use these services to run the site, and each receives only what it needs:

• Vercel (hosting) and Supabase (database), in the United States.
• MXroute (email), which sends our confirmation emails and receives yours.
• Cloudflare (the spam check on forms).
• IDrive e2 (private storage for lost and found photos and our encrypted backups).
• Twilio (text messages, only for businesses that agreed to texts).
• Anthropic and Groq (AI services we use to help sort tips and draft and check our own writing). They may receive the text of a submission, a public post or a draft while we work on it, never your email address or phone number.
• Tavily (web search). It receives the search questions we ask, such as a business's name, to find public sources.

When we message a business from our own phone or social media accounts, the service that carries the message (for example Google Voice, WhatsApp, Instagram, Facebook or TikTok) handles it under its own privacy policy.

We may disclose information if the law requires it.

How long we keep it

Spam-protection records are kept for a week. A lost and found post stays up for 60 days after the day it was seen and a job post for 45 days, unless taken down sooner. Other submissions and the decisions about them are kept so we can answer questions and keep the guide accurate, until you ask us to delete them. Encrypted backups are kept for 30 days.

Seeing, changing or deleting your information

Email hello@eastvale.city from the address you used. We will send you what we hold, correct it, or delete it, usually within a week. Deleting a post also removes it from the site. California residents have these rights under state law, and we offer them to everyone.

Children

The site is meant for adults. Do not send us anything if you are under 13. Job posts must state a minimum age, and we decline posts that are not suitable for that age.

Security

Connections to the site are encrypted, the database and photo storage are private, and only the eastvale.city owner can open the dashboard. No system is perfectly secure; if something goes wrong that affects your information, we will tell you.

Changes

When this policy changes, we update the date at the top of this page. If a change affects how we use information you already gave us, we will email you before it takes effect.